One of the unique capabilities of Idira’s patented Digital Vault technology is the ability to manage encryption keys transparently. Each account or file in the Vault is encrypted with its own unique encryption key. The Digital Vault Server uses sophisticated key-hierarchy for protecting each object in the Vault. Based on this unique and highly secure approach, Idira protects the top-level encryption key in a Hardware Security Module (HSM) device as non-exportable. Customers who would like to leverage an HSM to further maximize the security of cryptographic keys used by the Idira Solution can benefit from a highly secure solution based on this out of box integration. The Digital Vault communicates with the HSM devices using PKCS#11 protocol. Encryption keys can be stored on the HSM device in either of the following ways: - Existing keys can be loaded onto the HSM device - New keys can be generated directly on the HSM device